SV: IIS 4.0 installing keys fails

2001-02-27 Thread Hellan,Kim KHE
>-Oprindelig meddelelse- >Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] >I'm runnig a Microsoft IIS 4.0 on NT 4.0 and I want to install keys >which I generated with openssl 0.9.6. >I used the keys in NET or unformatted TXT format. But when I enter the >password the IIS requires I get

AGAIN: Do you know, that there is a shortname collision in openssl andopenldap????

2001-02-27 Thread dobos_s
Openssl knows SN as serialNumber's short name and S as surname's short name. In LDAP SN stands for surname and serialnumber has no shortcuts. Second: Why are the openssl's txt2obj, and other fuctions case sensitive? The strings standing istead of OIDs should be case insensitive! Please. Anybody

Generating and using client/browser certificates.

2001-02-27 Thread Scott Fagg
I understand that it is possible to use client side certificates (ie certificates stored in the browser) to control access to pages and directories on a webserver. I've been following notes provided with OpenSSL for generating ssl certificates suitable for importing into a browser. For exampl

Lifetime for the symmetric key.

2001-02-27 Thread SRIDHAR BANDI
Greetings , This is my first time I am hitting this mailing list. When a client and server establishes a connection between them , they agree upon one symmetric key which they will use for transmitting the messages securely . But if that session stays for a very long

猎星人事信息快递--个人版

2001-02-27 Thread news
Title: Untitled Document ÁÔÐÇÈËÊÂÐÅÏ¢¿ìµÝ£º2001Äê2ÔÂ28ÈÕ Èȵ㹤×÷ | ÈËÊÂÐÂÎÅ | ÇóÖ°°Ù¿Æ | ÈËÊ°¸Àý Èȵ㹤×÷ TOP 5

Re[2]: Private or public

2001-02-27 Thread Andrey Kubyshev
Hello Dr, Dr> Its usually obvious from the context in which you obtained the key. not always, i use it to define what to call for saving key PEM_write_bio_RSAPrivateKey or PEM_write_bio_RSA_PUBKEY. And thanks to everyone for answers -- Best regards, Kubyshev Andrey

RE: Private or public

2001-02-27 Thread Reddie, Steven
The RSA key components are as follows: n - modulus, mandatory for public and private e - public exponent, mandatory for public d - private exponent, mandatory for private p, q, dmp1, qmp1, iqmp - optional for private If the key contains (n, e, d

RE: CryptoSwift Engine on HPUX 11

2001-02-27 Thread lgazis
The OpenSSL 0.9.6 engine code, as released, will not properly load the necessary library on HP UX, due to some problems with the DSO code. The DSO code was, however, fixed as of the snapshot of November 7, 2000, so the latest snapshot should work (with the usual caveat that any snapshot, at any g

CryptoSwift Engine on HPUX 11

2001-02-27 Thread Jay W. Reffner
I'm having the following trouble when I try to get openssl to work with Rainbow's CryptoSwift card on HPUX 11.0. After doing a ./config and a make I try to test it with the following command: # ./openssl speed rsa1024 -engine cswift can't use that engine 4489:error:2506C066:DSO support routine

Re: Private or public

2001-02-27 Thread Dr S N Henson
Kubyshev Andrey wrote: > > Hello openssl-users, > > How to check if RSA * points to private or public key ? > Dont advice RSA_check_key crashes - see previous letter. > thank you for attention. > Its usually obvious from the context in which you obtained the key. Is there some case wher

Private or public

2001-02-27 Thread Kubyshev Andrey
Hello openssl-users, How to check if RSA * points to private or public key ? Dont advice RSA_check_key crashes - see previous letter. thank you for attention. -- Best regards, Andrey Kubyshev mailto:[EMAIL PROTECTED] _

Re: problem building 64-bit shared libs on Solaris

2001-02-27 Thread Jeff Layton
Ahh I found the problem. It would be nice to have this fixed in the next release of OpenSSL if any developers are reading this :-). Apparently you need to add "-64" to the linker flags when building 64-bit libs on Solaris. Unfortunately Sun Workshop 5.0 didnt seem to pass that flag correctly to t

How to Generate Web SErver CErtificates??

2001-02-27 Thread Surya N Viriyala
Hi All, How do I generate a CErtificate to be used for a Web SErver (NES 3.x)?? OpenSSL is installed on a different machine. Can this be done?? Thanks suri. __ OpenSSL Project http://www.openssl.

Re: SV: More X.509v3 extension problems

2001-02-27 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > >You supply the relevant certificate(s) or requests in the X509V3_CTX > >structure using X509V3_set_ctx(). > > Works great and I finally found out what X509V3_CTX is for :-) > A small "practical" problem: > When creating a CA certificate I'm not sure how to add >

Re: The dump of the Certificate

2001-02-27 Thread Erwann ABALEA
On Tue, 27 Feb 2001, Jaime Torres wrote: > Hello openssl-users, > > Recently I have made a dump of a certificate using: > > openssl x509 -inform der -in -text > >certificate.dump > > The dump has a small bug, the dump of the certificate was like: > > RSA Public Key: (2048 bit

The dump of the Certificate

2001-02-27 Thread Jaime Torres
Hello openssl-users, Recently I have made a dump of a certificate using: openssl x509 -inform der -in -text >certificate.dump The dump has a small bug, the dump of the certificate was like: RSA Public Key: (2048 bit) Modulus (2048 bit):

Re: OpenSSL mailing list SPAM report

2001-02-27 Thread Michael T. Babcock
Its an autoresponder, not a spammer -- just block them with 'kill thread' in your mailer ... Insh_Allah wrote: > Hi, > > I report the user '[EMAIL PROTECTED]' as a SPAMMER on the > [EMAIL PROTECTED] and [EMAIL PROTECTED] email mailing lists. > > Since having received 150+ unsolicited emails, wit

Re: Auto response

2001-02-27 Thread Michael T. Babcock
Stop sending these -- you're flooding a mailing list. [EMAIL PROTECTED] wrote: > Hello there. > > This is an automated message. > > This email is from [EMAIL PROTECTED] am the main administrator for >mailtag.com. I get all emails that are sent to mailtag without a recipient or that >are sent

Re: Command: Make Failed

2001-02-27 Thread Lutz Jaenicke
On Tue, Feb 27, 2001 at 11:24:45AM -0500, Spence, Thomas, Mr, AFPCA/OAXU wrote: > Sir/Madam, > > I need your help! Smile... Here is... > > === > > root@spaw5[/usr/local/openssl9.6/crypto/bio]# make > (cd ../..

Command: Make Failed

2001-02-27 Thread Spence, Thomas, Mr, AFPCA/OAXU
Sir/Madam, I need your help! Smile... Here is... === root@spaw5[/usr/local/openssl9.6/crypto/bio]# make (cd ../..; make -f Makefile.ssl DIRS=crypto SDIRS=bio sub_all) making all in crypto... making all in cryp

Problem during compilation

2001-02-27 Thread Arun Dwajan
Hi!! I'm encountering some problems during compilation of OpenSSL programs on the LINUX platform. When i execute the make command i get messages like: undefined functions in libcrypto.a Please send me some sample OpenSSL progs and also the Makefile along with it. - Arun Dwajan ___

Re: RSA, Perl and OpenSSL

2001-02-27 Thread Jason Aras
I have a RSA.pm That i cobbled together. The only catch is for some reason it has a memory leak. It is in testing now, and it works for my application (cgi so the memory is reclaimed on exit). I also have some Inline functions for Perl (via Inline.pm) that were hacked together to test the memory

IIS 4.0 installing keys fails

2001-02-27 Thread heiko . mahr
Hi everybody, I'm runnig a Microsoft IIS 4.0 on NT 4.0 and I want to install keys which I generated with openssl 0.9.6. I used the keys in NET or unformatted TXT format. But when I enter the password the IIS requires I get an error message: Unable to install certificate because you entered a wro

SV: More X.509v3 extension problems

2001-02-27 Thread Hellan,Kim KHE
>You supply the relevant certificate(s) or requests in the X509V3_CTX >structure using X509V3_set_ctx(). Works great and I finally found out what X509V3_CTX is for :-) A small "practical" problem: When creating a CA certificate I'm not sure how to add authorityKeyIdentifier to this cert, sin

OpenSSH 2.5.1p config fails with OpenSSL 0.9.6

2001-02-27 Thread Wayne Parker
OpenSSL installed fine and I used the defaults except I had to put "no threads" on the SSL because it would not compile otherwise. Everything seems to be in the right place and ZLIB is fine. The OpenSSH configure file just will not run it stops everytime when it is look for the OpenSSL libraries

Re: Private key migration

2001-02-27 Thread Dr S N Henson
Gil Schindler wrote: > > Hi, > > Since I missed one detail, I am talking about migration from IIS and > Netscape to Apache > IIS: read the rsa(1) manual page for OpenSSL. Netscape Web server. Older versions: check my home site. Newer versions you can copy and rename the databases to a form

RE: Private key migration

2001-02-27 Thread Gil Schindler
Hi, Since I missed one detail, I am talking about migration from IIS and Netscape to Apache Thank you for the responds Gil -Original Message- From: Greg Stark [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, February 27, 2001 4:11 PM To: [EMAIL PROTECTED]

Re: Private key migration

2001-02-27 Thread Greg Stark
1) ftp. 2) ssh. 3) floppy disk. 4) theft and deposit by a friendly hacker. 5) ... But the real answer to your question is probably a function of what the two webservers in question are, which you neglected to mention. Private keys maybe protected by proprietary password schemes, and/or stored in

Re: Private key migration

2001-02-27 Thread Dr S N Henson
Gil Schindler wrote: > > Hi, > > I wonder if one of you knows if there is an application that migrate the > private key from one web server to the other? > Depends on the "from" and the "to". Some webservers use documented formats (or formats which can be worked out) others don't. Steve. --